Reflected Cross-Site Scripting Vulnerability in Azon Dominator by Unknown Vendor

CVE-2025-40725

What is CVE-2025-40725?

A reflected cross-site scripting vulnerability exists in Azon Dominator, allowing attackers to execute arbitrary JavaScript in victims' browsers. By crafting a malicious URL that exploits the 'q' parameter in the /search path via GET requests, the attacker can steal sensitive user information, such as session cookies, or execute actions within the user’s session. This vulnerability underscores the importance of proper input validation and robust cybersecurity measures to mitigate such risks.

References